diff --git a/java/ql/src/Security/CWE/CWE-90/LdapInjection.ql b/java/ql/src/Security/CWE/CWE-90/LdapInjection.ql index be247b58e57..5ecff4a55b2 100644 --- a/java/ql/src/Security/CWE/CWE-90/LdapInjection.ql +++ b/java/ql/src/Security/CWE/CWE-90/LdapInjection.ql @@ -15,8 +15,7 @@ import semmle.code.java.dataflow.FlowSources import LdapInjectionLib import DataFlow::PathGraph -from - DataFlow::PathNode source, DataFlow::PathNode sink, LdapInjectionFlowConfig conf +from DataFlow::PathNode source, DataFlow::PathNode sink, LdapInjectionFlowConfig conf where conf.hasFlowPath(source, sink) select sink.getNode(), source, sink, "LDAP query might include code from $@.", source.getNode(), "this user input"